Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/d97c04b4fb7224684a5f18206df598707c1a948b.roa
File: d97c04b4fb7224684a5f18206df598707c1a948b.roa (raw, json)
Hash identifier: h88dG33sPnVbsy209LKZi4oaLtGoduCvlr4pveAE9vs=
Subject key identifier: EF:7A:60:0A:B6:2E:12:85:4F:FA:0D:7C:62:ED:17:0F:D8:E5:C5:0A
Certificate issuer: /CN=05a7ade91da7f5fcb5c011218c0c9b39ada6823b
Certificate serial: 2438D6
Authority key identifier: E1:0F:9F:FA:D3:5C:F4:16:A5:B3:B4:30:F3:9A:88:03:AF:6D:6E:DD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05a7ade91da7f5fcb5c011218c0c9b39ada6823b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/d97c04b4fb7224684a5f18206df598707c1a948b.roa
Signing time: Thu 14 Sep 2023 21:01:40 +0000
ROA not before: Wed 13 Sep 2023 21:01:39 +0000
ROA not after: Sun 14 Sep 2025 21:01:39 +0000
asID: 264668
IP address blocks: 45.70.202.0/23 maxlen: 24
2803:bc20::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2373846 (0x2438d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a7ade91da7f5fcb5c011218c0c9b39ada6823b
Validity
Not Before: Sep 13 21:01:39 2023 GMT
Not After : Sep 14 21:01:39 2025 GMT
Subject: CN=d97c04b4fb7224684a5f18206df598707c1a948b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:52:3e:39:4c:96:d7:29:5e:d2:eb:56:4f:58:
75:3c:a5:38:99:91:6e:39:6d:18:e0:70:80:7b:ab:
d5:1e:8d:3f:0b:41:da:b8:42:73:b3:94:03:65:17:
a0:e6:5c:df:03:57:45:b4:4b:07:31:6a:71:57:25:
14:d3:cb:8e:c7:26:8f:d0:61:60:e2:49:88:5a:2e:
3c:28:21:36:a3:33:40:95:26:3f:7f:fc:3c:c2:eb:
71:23:14:e3:8f:0d:c5:12:ce:1a:6d:24:26:e1:f1:
29:24:c7:17:c8:51:6f:da:a3:7c:d3:83:74:4a:29:
df:1f:e0:fa:a0:e9:e7:4b:54:16:9c:09:32:08:01:
db:60:23:4c:0b:76:61:ec:33:97:8b:ba:53:24:7b:
c1:8f:8f:b8:13:04:e8:de:ce:a9:8e:d5:c2:56:63:
91:68:63:3a:a6:2b:e5:fe:85:77:2f:75:28:88:88:
25:6a:1d:00:56:5a:37:45:31:4d:c3:b9:b9:f1:0a:
24:ed:5d:b0:0d:71:64:f4:e7:cb:a3:3c:7f:b3:7b:
92:3a:03:15:35:7e:7f:9a:ce:3c:66:bc:67:b1:ef:
66:40:4f:ec:49:f3:8b:fc:5c:83:ff:4e:8a:28:59:
c2:97:7d:14:92:30:b0:c6:49:87:ae:eb:51:9e:61:
0b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7A:60:0A:B6:2E:12:85:4F:FA:0D:7C:62:ED:17:0F:D8:E5:C5:0A
X509v3 Authority Key Identifier:
keyid:E1:0F:9F:FA:D3:5C:F4:16:A5:B3:B4:30:F3:9A:88:03:AF:6D:6E:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05a7ade91da7f5fcb5c011218c0c9b39ada6823b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/d97c04b4fb7224684a5f18206df598707c1a948b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/05a7ade91da7f5fcb5c011218c0c9b39ada6823b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.202.0/23
IPv6:
2803:bc20::/32
Signature Algorithm: sha256WithRSAEncryption
42:87:7a:45:46:d2:71:6a:d4:af:f8:c6:25:91:fb:06:87:5a:
8d:6b:3b:15:29:4b:9e:15:2a:11:7f:81:e8:9e:1b:60:b2:e0:
75:83:32:bd:be:4d:31:46:cb:c5:4e:a4:8e:14:ff:e6:1f:1c:
89:4b:f1:14:d7:3e:8c:a7:57:3d:fe:1c:19:90:7f:44:bc:12:
b9:75:ac:42:a2:ec:c8:07:6d:ad:9e:f0:ea:94:59:e6:86:d2:
11:1c:b4:2b:4c:c0:2e:f8:a4:13:2f:06:39:24:5a:a8:26:12:
ed:9e:9d:6f:51:93:1e:c4:d2:ba:74:f3:9b:ed:1d:ec:f9:cf:
34:58:63:fc:8c:4f:a3:64:84:2b:02:e5:de:4a:32:8e:be:af:
c4:92:18:d2:1d:6b:16:35:87:0c:06:5e:7b:b2:90:23:3b:80:
52:cd:63:92:2b:91:cf:f9:55:3d:cb:e5:2c:dd:26:ee:94:86:
58:df:42:21:12:e1:10:f9:9d:34:e9:81:dd:92:f7:c8:e2:d3:
6e:37:d9:6a:cc:e7:b9:f2:65:e7:4d:b4:23:0c:26:f3:d7:71:
d5:8b:49:ec:a5:e5:43:83:39:38:9f:d2:f8:e6:f7:ab:47:54:
97:9f:ed:70:c2:1c:e5:71:0e:fa:8d:34:35:e4:76:88:54:d1:
94:c6:a9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org